D-Link vulnerabilities
855 CVEs and advisories name D-Link as an affected vendor, 3 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2025-14884D-Link DIR-605 Firmware Update Service command injection
- CVE-2023-53896D-Link DAP-1325 Hardware A1 Unauthenticated Configuration Download
- CVE-2025-14659D-Link DIR-860LB1/DIR-868LB1 DHCP command injection
- CVE-2025-14528D-Link DIR-803 Configuration getcfg.php information disclosure
- CVE-2025-13607D-Link CCTV camera model DCS-F5614-L1 Missing Authentication for Critical Function
- CVE-2025-14225D-Link DCS-930L alphapd setSystemAdmin command injection
- CVE-2025-14208D-Link DIR-823X set_wan_settings sub_415028 command injection
- CVE-2025-13562D-Link DIR-852 gena.cgi command injection
- CVE-2025-13553D-Link DWR-M920 formPinManageSetup sub_41C7FC buffer overflow
- CVE-2025-13552D-Link DIR-822K/DWR-M920 formWlEncrypt buffer overflow
- CVE-2025-13551D-Link DIR-822K/DWR-M920 formWanConfigSetup buffer overflow
- CVE-2025-13550D-Link DIR-822K/DWR-M920 formVpnConfigSetup buffer overflow
- CVE-2025-13549D-Link DIR-822K formNtp sub_455524 buffer overflow
- CVE-2025-13548D-Link DIR-822K/DWR-M920 formFirewallAdv buffer overflow
- CVE-2025-13547D-Link DIR-822K/DWR-M920 formDdns memory corruption
- CVE-2025-13306D-Link DWR-M920/DWR-M921/DIR-822K/DIR-825M formDebugDiagnosticRun system command injection
- CVE-2025-13305D-Link DWR-M920/DWR-M921/DWR-M960/DIR-822K/DIR-825M formTracerouteDiagnosticRun buffer overflow
- CVE-2025-13304D-Link DWR-M920/DWR-M921/DWR-M960/DWR-M961/DIR-825M formPingDiagnosticRun buffer overflow
- CVE-2025-13191D-Link DIR-816L soap.cgi soapcgi_main stack-based overflow
- CVE-2025-13190D-Link DIR-816L __ajax_exporer.sgi scandir_main stack-based overflow
- CVE-2025-13189D-Link DIR-816L gena.cgi genacgi_main stack-based overflow
- CVE-2025-13188D-Link DIR-816L authentication.cgi authenticationcgi_main stack-based overflow
- CVE-2022-50596D-Link DIR-1260 <= v1.20B05 GetDeviceSettings Unauthenticated Command Injection
- CVE-2018-25120D-Link DNS-343 ShareCenter <= 1.05 Command Injection via /goform/Mail_Test
- CVE-2025-12313D-Link DI-7001 MINI msp_info.htm command injection
- CVE-2025-12296D-Link DAP-2695 Firmware Update sub_4174B0 os command injection
- CVE-2025-12295D-Link DAP-2695 Firmware Update sub_40C6B8 signature verification
- CVE-2025-60344A path traversal (directory traversal) vulnerability in D-Link DSR series routers allows unauthenticated remote attackers to manipulate inpu
- CVE-2025-34253D-Link Nuclias Connect <= v1.3.1.4 Stored Cross-Site Scripting (XSS)
- CVE-2025-34255D-Link Nuclias Connect <= v1.3.1.4 Forgot Password Account Enumeration